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DETAILED ACTION 
Claim Rejections - 35 USC § 103 

1 . The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

2. Claims 1-3 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Handelman et al (U.S. 6,298,441) in view of RFC 2104 ("CHMAC: Keyed- 
Hashing for Message Authentication"), Yamagishi (U.S. 5,379,433), and 
Richards (U.S. 6,385,723). 

Re claims 1, 2. Hadelman et al disclose a method of transferring information from a 
content supplier from one or more databases, such information including program(s), 
audio, still, data files, or video (i.e., lists, spreadsheets, reports, documents, 
presentation graphics, sales information) or combinations thereof to a remote location 
(see col. 3, lines 9-19) that uses an authorizing hybrid optical disc that permits the use of 
such transferred information, comprising the steps of: (a) providing an authorizing hybrid 
optical disc having a ROM portion and a RAM portion (see col. 9, lines 21-27 and col. 12, 
lines 36-54); (b) providing the ROM portion to include a preformed identification 
signature which is impressed into the ROM portion of the disc and is arranged to be 
difficult for a pirate to copy (see col.4, lines 11-21); (e) downloading the selected 
information to the user's memory location for use by the user (col 4, lines 22-25). The 
examiner has interpreted the term "disc" to also include cards. This may include smart 
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cards or integrated circuit cards. It should be noted that the smart card device as 
disclosed by Handelman et al can make use of a separate memory card which can also 
be an optical disc (see col. 9, lines 21-27). Further, Handelman et al later disclose that 
the memory card and the smart card can be combined into one card/disc (see col. 12, 
lines 3740). In column 4, lines 11-21, Handelman disclosed that a user of a smart card 
would not be able to receive a document unless they were authorized to do so. Such 
authorization can only come about through the use of some sort of identification feature 
encoded within the smart card. The examiner has interpreted any such identification 
feature as a signature, including passcodes, keys, message authentication codes, or 
passwords. Further, Yamagishi also discloses the use of hybrid optical discs, which 
include a RAM and an identification signature located in a ROM portion and is arranged 
to be difficult for a pirate to copy (col 2, lines 23-56). One of ordinary skill in the art at 
the time of the applicant's invention would be motivated to make use of a hybrid optical 
disc as a smart card because the amount of memory that is available on an optical disc 
to use as storage for downloaded information is often much greater than other types of 
memory cards for the same amount of space taken up. Handelman et al does not 
disclose providing the RAM portion which includes user-specific encrypted information 
which makes the authorizing device unique for a specific user and in combination with 
the ROM preformed identification signature, provides a user-personalized secure 
signature. However, RFC 2104 discloses a mechanism for message authentication 
using a cryptographic hash function and a secret key (Abstract). Further, RFC 2104 
states that the keys should be randomly chosen and refreshed or exchanged 
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periodically (section 3). The nature of an optical disc is such that only the RAM portion 
of the disc can be written and rewritten by a user, so the key can only be stored in the 
RAM portion of the disc since the key needs to be exchanged periodically. It also makes 
sense to encrypt the key for security reasons. The key, along with the identification 
signature already disclosed to exist in the ROM portion of the hybrid disc, would allow 
for creating a user-personalized secure signature in accordance with the teachings of 
RFC 2104. One of ordinary skill in the art at the time of the applicant's invention would 
be motivated to do so because it would allow for the creation of a more secure signature 
and in case one signature is compromised, a new one can be created easily by the user 
choosing a new key. Handelman does not disclose a content supplier authenticating a 
user using the user-personalized secure signature so as to permit a user to 
communicate over a network with the content supplier and the user selecting 
information desired to be downloaded. However, Richards discloses a communication 
scheme in which a person would encrypt a message using the key of the person who 
will be receiving the message before sending the message (see col 5, lines 23-33). One 
of ordinary skill in the art would be motivated to combine the teachings of Handelman et 
al and Richards so that the information downloaded to the user's memory location by 
the content supplier is first encrypted before being sent because Handelman et al were 
interested in securing documents so that only authorized users would have access and 
encrypting such documents before sending them would further secure the 
documents. 
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Re claim 3. Hadelman et al further disclose the method of claim 1 wherein a channel is 
used to communicate with the remote location via a network and wherein the hybrid disc 
is encoded with the address of the remote location (see col. 2, last paragraph; col. 3 1 st 
paragraph, and col.4, lines 26-31). 

3. Claims 4-7 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Handelman et al (U.S. 6,298,441) in view of RFC 2104 ("CHMAC: Keyed- 
Hashing for Message Authentication" ), Yamagishi(U.S. 5,379,433), Richards 
(U.S. 6,385,723), and Wyatt (U.S. 6,041 ,41 1). 
Re claim 4. None of Haldelman et al, RFC 2104, Yamagishi, and Richards explicitly 
disclose the method of claim 3 wherein the channel is the Internet. However, Wyatt 
discloses the use of the internet as the channel for communication. Thus, one of 
ordinary skill in the art would have been motivated to use the Internet as the 
communication channel because it would allow the content providers in Handelman et 
al's invention to reach a larger population of user more easily and to generate more 
profit. 

Re claim 5. None of Haldelman et al, RFC 2104, Yamagishi, and Richards explicitly 
disclose the method of claim 1 wherein the user-personalized secure signature includes 
payment authorizing information. However, Wyatt discloses that in one embodiment of 
his invention, payment information only needs to be entered once and such things as 
account or credit card number will be stored and associated with the secure signature of 
the user (col 5, last paragraph). In this manner, the payment authorizing information is 
the user-personalized secure signature. Thus, one of ordinary skill in the art at the time 
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of the applicant's invention would have been motivated to combine Wyatt, Haldelman et 
al, RFC 2104, Yamagishi, and Richards teachings as it would allow for faster 
transactions to occur without the user having to enter payment information for each 
transaction. As such, a content provider would be able to utilize less network resources 
for each transaction and save on the overhead costs of selling digital content. 
Re claim 6. None of Haldelman et al, RFC 2104, Yamagishi, and Richards explicitly 
disclose a method of claim 1 further including the step of a user making payment via the 
network for the transfer of the selected information. However, Wyatt discloses an 
ecommerce system in which payment is made via a network for the selected information 
(col 6, lines 26-55). Thus, one of ordinary skill in the art at the time of the applicant's 
invention would have been motivated to combine Wyatt, Haldelman et al, RFC 2104, 
Yamagishi, and Richards teachings because many content providers would naturally 
want to be paid for their contents and Handelman et al disclosed that the content would 
only be downloaded if the price of the content is within the user's spending limit (see 
col. 3 2nd paragraph). A payment via a network would be the fastest and most 
convenient way of rendering payment to the content provider. Further, payment via a 
credit card over a network has been known at the time of the applicant's invention. 
Re claim 7. None of Haldelman et al, RFC 2104, Yamagishi, and Richards disclose a 
method of claim 6 wherein payment is provided by a user by transferring a payment 
number which can be used for transferring a predetermined payment amount from a 
commercial institution that can be for a number of content selections to be selected by 
the holder of the hybrid optical disc. However, Wyatt discloses entering an account 
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number and a credit card number into an order form so that payment could be rendered 
for the content selected by a user (col 5, lines 52-56). Thus, one of ordinary skill in the 
art at the time of the applicant's invention would have been motivated to combine Wyatt, 
Haldelman et al, RFC 2104, Yamagishi, and Richards teachings for user's identity 
verification. 

Conclusion 

The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure: 

1. Davis et al (U.S. 6,105,008) discloses using a smart card to pay for goods 
and services. 

2. Spies et al (U.S. 6,055,314) discloses a smart card with RAM and ROM 
portion and use of the public and private key to encrypt and decrypt data. 

3. Akiyama et al (U.S. 5,805,699) discloses a method of copying CD's with the 
use of signatures. 

4. Downs et al (U.S. 6,226,618) discloses accessing secure content controlled 
by a vendor via a network and using a key or signature. 

5. Kyeret al (U.S. 5,671,276) discloses encrypting and decrypting packages of 
services on a network. 

6. Mochizuki (U.S. 6,097,814) discloses an optical disk with cipher key. 

7. Morales (U.S. 5,291,554) discloses electronic distribution of content over a 
network and payment system. 

8. Tolopka et al (U.S. 6,044,349) discloses a smart card with encrypted 
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identifying data. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to OJO O. OYEBISI whose telephone number is (571) 

272- 8298. The examiner can normally be reached on 8 :30A.M-5 :30P.M. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, HYUNG S. SOUGH can be reached on (571)272-6799. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 

273- 8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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